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Amendments To The Drawings: 

None. 
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Remarks 

This Amendment is in response to the Office Action dated September 8, 2008. In 
the non-final claims 1-22 were rejected as anticipated by Graham US 2002/0178271. 

Applicant respectfully traverse this rejection 
§102(b) Rejection 

In the Office Action, the Examiner raises an objection on the basis that the 
invention defined in the claims is considered to be anticipated by the disclosure in US 
2002/0178271 (Graham). 

Claim 1 of the current application specifies an access control system for controlling 
access to data stored on at least one data storage medium of a computing system which 
comprises, inter alia, for each authorized user, a master data access profile and a current access 
data access profile, the current data access profile being modifiable within parameters defined by 
the master data access profile. 

In this way, it is possible to modify access parameters of a user during use of a 
computer system, for example according to the particular activity being carried out by the user 
and associated risk to the computer system, but only within the access parameters defined by the 
master data access profile. Accordingly, it is possible to maintain control over data access for 
each user by defining appropriate master access profiles, while allowing modification of a current 
access profile without any requirement to re-boot the computing system. 

There is no disclosure of this arrangement in Graham. In Graham, there is 
disclosed a dynamic file access control and management system which is implemented as a proxy 
file management system. While this document may well disclose a type of access profile which is 
used to define levels of access for authorized users, there is no disclosure of providing two data 
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access profiles for each user , a master data access profile and a current data access profile 
modifiable within parameters defined by the master data access profile. 

The Examiner refers to paragraph 1 1 1 of Graham in relation to this feature. 
However, this paragraph refers only to maintenance of "content access policies". There is no 
clear disclosure of a master access profile and a current access profile for each user as discussed 
above, as can be seen below in paragraph 1 1 1 from Graham: 



[0111] 9) Policy Editor 344 — Included as part of the management services 
module 226 , all content access policies are maintained via the policy editor 
344 . This service performs internal policy consistency validation, rights 
revocation, and synchronized policy updates. The definition of this service 
is determined largely by the definition of the supported policies identified 
below (in Policy). 

In fact, the Graham reference does not discuss access profiles at all, much less two 



different copies for each user, a master data access profile and a current data access profile. 

Claims 1-22 remain pending in this application. Because each of the independent 
claims 1, 11,21 and 22 each require "each data access profile including a master data access 
profile and a current data access profile", which is not disclosed in Graham, it is respectfully 
requested that the § 102(b) rejection based on Graham be withdrawn. 
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The allowance of claims 1-22 is respectfully requested. 

Respectfully submitted, 

VIDAS, ARRETT & STEINKRAUS 

Date: February 8, 2009 By: /Richard A. Arrett/ 

Richard A. Arrett 
Registration No.: 33153 

6640 Shady Oak Dr., Suite 400 
Eden Prairie, MN 55344-7834 
Telephone: (952) 563-3000 
Facsimile: (952) 563-3001 
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